Full validation · 50 questions · ~15 minutes
The CISO Readiness Assessment, full validation
Five modules, ten questions each. It tests your judgement on real situations, asks what evidence you could produce today, and compares both with how you rate yourself.
Module 1
Governance & Board
How you report to the board, who owns cyber risk, and how oversight is structured.
Module 2
Risk & Regulation
Whether you know your notification clocks, can put a number on risk, and keep the register honest.
Module 3
Incident Leadership
How you command the first hours of an incident, how ready the plan is, and how you make the hard calls.
Module 4
Third-Party & Cloud/AI Risk
How you manage suppliers, cloud identity and logging, and the AI your organisation now uses.
Module 5
Programme & People
How your strategy and budget hold up, how resilient the team is, and whether security culture changes behaviour.
You get
- A maturity level (1 to 5) per module
- Validated vs self-rated scores
- Consistency and confidence checks
- A 90-day plan and a detailed PDF report
Your progress is saved in this browser, so you can stop and come back. Answer for how things are today, not how they should be: the report is only as useful as the answers. A self-assessment for development planning, not a certification.
Short on time? Take the 2-minute scorecard first.